C++: Add a small amount of pruning to 'SizeBarrierConfig'.

github · Aug 25, 2023 · 9c5d735 · 9c5d735
1 parent ded06a7
commit 9c5d735
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/cpp/ql/lib/semmle/code/cpp/security/InvalidPointerDereference/AllocationToInvalidPointer.qll b/cpp/ql/lib/semmle/code/cpp/security/InvalidPointerDereference/AllocationToInvalidPointer.qll
@@ -222,6 +222,12 @@ private module InterestingPointerAddInstruction {
     )
   }
 
+  /**
+   * Holds if `n` is a size of an allocation whose result flows to the left operand
+   * of a pointer-arithmetic instruction.
+   *
+   * This predicate is used to reduce the set of tuples in `SizeBarrierConfig::isSource`.
+   */
   predicate isInterestingSize(DataFlow::Node n) {
     exists(DataFlow::Node alloc |
       hasSize(alloc.asConvertedExpr(), n, _) and